How do I use MCP Veracode?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@MCP Veracode show me high severity findings for the payment-gateway application" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

MCP Veracode

MCP server para consultar Veracode desde Claude Code.

Tools

Tool	Descripcion
`veracode_applications`	Listar y buscar aplicaciones
`veracode_findings`	Vulnerabilidades y flaws de una aplicacion
`veracode_scan_status`	Estado de scans y summary report
`veracode_policy_compliance`	Estado de cumplimiento de politicas

Instalacion

Agregar a ~/.claude/mcp.json:

{ "mcpServers": { "veracode-mcp": { "command": "npx", "args": ["-y", "github:landscapedotcl/mcp-veracode"], "env": { "VERACODE_API_ID": "tu_api_id", "VERACODE_API_SECRET": "tu_api_secret" } } } }

Reiniciar Claude Code para que cargue el MCP server.

Autenticacion

Usa HMAC-SHA-256 con API ID y API Secret, el metodo estandar de Veracode.

Las credenciales se generan en Veracode > Account Settings > API Credentials.

Uso

# Listar aplicaciones veracode_applications({ name: "mi-app" }) # Findings de una aplicacion veracode_findings({ applicationGuid: "guid-aqui", scanType: "STATIC", severityGte: 3 }) # Estado de scans veracode_scan_status({ applicationGuid: "guid-aqui" }) # Apps que no cumplen politica veracode_policy_compliance({ policyCompliance: "DID_NOT_PASS" })